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Remarks 

The application has been reviewed in Ught of the Office Action dated May 6, 2004. Claims 1- 
14 are pending in the application with claims 1 and 5 being in independent form. 

The Office Action indicates that the pending patent application did not contain an abstract of 
the disclosure on a separate sheet, as required by 37 CFR 1.72(b). Such an abstract on a separate 
sheet is being submitted herewith. Withdrawal of the objection to the specification is respectfully 
requested. 

Claims 1-14 were rejected under 35 U.S.C. 102(e) as allegedly anticipated by US Patent 
6,092, 1 94 to Touboul. Applicants have carefully considered the Examiner's comments and the cited 
art, and respectfully submit independent claims 1 and 5 are patentably distinct from the cited art, for 
at least the following reasons. 

Independent Claim 1 relates to a method for preventing a hostile use of computer 
resources by an application running on a workstation. A list of services that are not allowed for 
access by unspecified applications is provided, and when such unspecified application runs on 
the workstation, the application is prevented from accessing any resource directly. Any direct or 
indirect request for access to specific services is analyzed, to determine whether such request is 
allowable according to the list. The workstation processes the request if it is allowable. The 
unspecified application is prevented from accessing the requested resource if the request is not 
allowable. The resource may be any local or remote resource, such as, memory allocation, files, 
directories, operations with files and directories, such as copy, delete or compress, or any other 
operation leading to a permanent change in the workstation or its periphery. 

Touboul, as understood by Applicants, relates to a system and method for preventing 
hostile downloadables from being downloaded to a computer or network and executed. Li other 
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words, Touboul blocks the undesirable application so that it never reaches and runs on the client 
computer (see, for example, Touboul, col. 2, lines 21-28 and col. 3, lines 10-13). 

In contrast, independent claim 1 is concerned with preventing a hostile use of computer 
resources by an application running on a workstation and when such application runs on the 
workstation, preventing the application from accessing any resource directly. 

Accordingly, Applicants submit independent claim 1 is patentably distinct from the cited 

art. 

Applicants also find no teaching or suggestion in the cited art of an agent for protecting a 
workstation against the hostile use of computer resources by an unspecified application running 
on the workstation, comprising means for detecting an unspecified application running on the 
workstation, means for determining the requests for resources to be used by the unspecified 
application, etc, as recited in independent claim 5. 

Accordingly, Applicants submit independent claim 5 is also patentably distinct fi-om the 
cited art. 

The Office is hereby authorized to charge any additional fees which may be required in 
connection with this amendment and to credit any overpayment to our Deposit Account No. 03-3 125. 

If a petition for an extension of time is required to make this response timely, this paper 
should be considered to be such a petition, and the Commissioner is authorized to charge the 
requisite fees to our deposit account No. 03-3125. 

If a telephone interview could advance the prosecution of this application, the Examiner is 
respectfully requested to call the undersigned attorney. 
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Entry of this amendment and allowance of this application are respectfully requested. 



Respectfully submitted. 




Reg. No.33,515 
Attorney for Applicants 
Cooper & Dunham LLP 
Tel.: (212) 278-0400 
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ABSTRACT 

Method and agent for preventing a hostile use of computer resources by an application 
running on a workstation. A list of services that are not allowed for access by unspecified 
applications is provided, and when such unspecified application runs on the workstation, the 
application is prevented from accessing any resource directly. Any direct or indirect request for 
access to specific services is analyzed, to determine whether such request is allowable according 
to the list. The workstation processes the request if it is allowable. The unspecified application 
is prevented from accessing the requested resource if the request is not allowable. The resource 
may be any local or remote resource, such as, memory allocation, files, directories, operations 
with files and directories, such as copy, delete or compress, or any other operation leading to a 
permanent change in the workstation or its periphery. 
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